[{"_1":2,"_163":-5,"_164":-5},"loaderData",{"_3":4,"_18":19,"_26":27,"_142":143},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":22,"_24":11,"_25":22},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_28":29,"_30":-5,"_31":11,"_32":11,"_33":34,"_35":36,"_37":-5,"_38":11,"_39":40,"_89":-5,"_90":91,"_130":-5,"_131":11,"_132":22,"_133":11,"_134":11,"_135":-5,"_136":11,"_137":-5,"_138":139,"_140":92,"_141":-7},"canonicalUrl","https://hub.docker.com/r/hegusung/hashcatnode/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","hegusung","reponame","hashcatnode","cloudBuildSource","isAutobuildsAvailable","repo",{"_41":42,"_43":44,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":56,"_58":36,"_33":34,"_59":60,"_61":45,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":63,"_70":71,"_72":11,"_73":34,"_74":75,"_80":11,"_81":82,"_86":34,"_87":88},"categories",[],"content_types",[45],"image","date_registered","2020-06-18T22:04:15.802953Z","description","HashcatNode of the webhashcat project: https://github.com/hegusung/WebHashcat","is_private","last_updated","2020-10-05T15:02:05.614258Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[57],"application/vnd.docker.container.image.v1+json","name","pull_count",477,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# WebHashcat\nHashcat web interface\n\nWebHashcat is a very simple but efficient web interface for hashcat password cracking tool.\nIt hash the following features:\n* Distributed cracking sessions between multiple server (you only need to install HashcatNode on the remote server)\n* Cracked hashes are displayed almost as soon as they are cracked\n* Cracking session restore (for example after host reboot)\n* Upload plaintext files for analytics purposes\n* Search patterns through the entire database\n* Analytics\n\nCurrently WebHashcat supports rule-based and mask-based attack mode\n\nThis project is composed of 2 parts: \n- WebHashcat, the web interface made with the django framework \n- HashcatNode, A hashcat wrapper which creates an API over hashcat\n\n## WebHashcat Usage\n\n### Adding rules, masks and wordlists to webhashcat\n\nGo to the Hashcat > Files page, than simply use the upload button to add new files. Note that uploaded files are added to webhashcat but not deployed to nodes yet.\n\n

$\"Rules/Masks/Wordlists\"$

\n\n### Registering a node\n\nThe nodes can be simply added and removed on the Node page, you only need to define the ip, port, username and password (as defined in the hashcatnode configuration script).\n\n

$\"Node$

\n\nOnce a node is registered, click on the node and hit the synchronise button on the top. Rules, Masks and Wordlists should now be uploaded to the node (all files should be green).\n\n

$\"Node\"$

\n\n### Adding a hashfile\n\nIn the hashcat page, simply hit the bottom \"add\" button to upload a new hashfile, after comparing the new hashfile to the centralised potfile (can take a few minutes with huge hashfiles), your hashfile should appear in the list.\n\n### Creating a cracking session\n\nSimply hit the \"+\" button on the left of the hashfile, then select the desired cracking method. Note that sessions aren't started automatically, you will need to use the \"play\" button to start them.\n\n

$\"Hashfile$

\n\nIf you set the cron to 5 minutes, the central potfile will be updated every 5 minutes with newly cracked hashes.\n\nSimply click on the hashfile to view the results, it can take few seconds on huge hashfiles. Note that you can also download the results on both the hashfile list and hashfile views.\n\n

$\"Hashfile$

\n\n### Search for ŝpecific patterns in usernames\n\nUsing this functionality you can easily search from client's email addresses in leaks uploaded in webhashcat. Simply provide a string you want to look for in the username and select in which hashfiles you want to look for it. Once the research in the database is done, you should be able to download the results. If you add a new hashfile afterwards, you can simply click on the 'reload' button and WebHashcat will search again in the whole database.\n\n

$\"Hashfile$

\n\n## Install\n\n### HashcatNode\nHashcatNode can be run on both Windows and Python\n\nWindows limitation:\nOnly **one** cracking session can be running/paused at a time\n\nInstall the pip packages:\n```\npip3 install -r requirements.txt\n```\nIf you are running it on Windows, install also the pywin32 package\n```\npip3 install pywin32\n```\n\nRename the `settings.ini.sample` file to `settings.ini` and fill the parameters accordingly.\n\nThe rules, mask and wordlist directory must be writable by the user running hashcatnode\n\nthe hashcatnode can be run simply by running `./hashcatnode.py`\n\n* Create the database (sqlite)\nRun the script (HashcatNode folder)\n```\n./create_database.py\n```\n\n* Create the node certificates (Install a Windows version of OpenSSL if you are running HashcatNode on Windows)\n```\nopenssl req -x509 -newkey rsa:4096 -keyout server.key -out server.crt -days 365 -nodes\n```\n\n* HashcatNode can be started manually by:\n```\npython3 hashcatnode.py\n```\n\n* Register as a service (systemd) (linux only)\nEdit the systemd/hashcatnode.service file to match your setup, then copy it to /etc/systemd/system/ \n\n#### Dependencies\n\n- python3\n- flask\n- flask-basicauth\n- peewee\n- hashcat >= 3\n\n### WebHashcat\n\n\n#### Installing Packages\n\nInstall the following packages:\n```\napt install mysql-server\napt install libmysqlclient-dev\napt install redis\napt install supervisor\n```\n\nInstall the pip packages:\n```\npip3 install -r requirements.txt\n```\n\n#### Creating the database\n\nCreate the database using the following command to ensure you can insert utf8 usernames/passwords\n```\nmysql> CREATE DATABASE webhashcat CHARACTER SET utf8;\nmysql> CREATE USER webhashcat IDENTIFIED BY '';\nmysql> GRANT ALL PRIVILEGES ON webhashcat.* TO 'webhashcat';\n```\n\n#### Configuration\n\nWebHashcat is a django application using mysql database, its installation is done this way:\n* Copy `Webhashcat/settings.py.sample` file to `WebHashcat/settings.py`\n* Edit it:\n- Change the SECRET_KEY parameter\nYou can generate a random secret key by running this in a python shell\n```\nfrom django.utils.crypto import get_random_string\n\nchars = 'abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*(-_=+)'\nget_random_string(50, chars)\n```\n- Add your webhashcat fqdn to ALLOWED_HOSTS\n- Set your mysql username and password in the DATABASES section\n- Set DEBUG = False if you are using it in production !\nyou can refer to the following django documentation for further info: https://docs.djangoproject.com/en/2.0/howto/deployment/checklist/\n\n* Copy `settings.ini.sample` file to `settings.ini`\n* Edit `settings.ini` file\n- the potfile parameter doesn't need to be changed\n\n* Create the tables with django\n```\n./manage.py makemigrations\n./manage.py migrate\n```\n\n* Create the user to access the interface\n```\n./manage.py createsuperuser\n```\n\n#### Setting up the web server\n\n* If you want to test the interface without setting up a web server use this command:\n```\n./manage.py runserver\n```\n\n* If you want to set up the interface with a proper webserver like apache or nginx please refer to the following documentation:\nhttps://docs.djangoproject.com/en/2.0/howto/deployment/wsgi/modwsgi/\n\n#### Setting up supervisor\n\nSupervisor is the deamon which is responsible of heavy background tasks such as pulling latest results from the nodes or importing hashfiles.\n\n* After installing supervisor, copy the configuration files from the Webhashcat/supervisor folder to the /etc/supervisor/conf.d/ folder.\n* Once done, edit them to match your configuration\n\n#### Dependencies\n\n- python3\n- django >= 2\n- hashcat >= 3\n- mysqlclient\n- humanize\n- requests\n- requests-toolbelt\n- celery\n- redis\n- supervisor\n\n## Operating System improvements\n\nIf you are willing to process more than 10M hashes, I recommend you to apply the following mofication to your system:\n* Increase the your /tmp size: Mysql tends to put a lot of data in the /tmp directory when processing huge hashfiles\n* Increase your swap partition size\n* If you use InnoDB tables in you MySQL configuration, I recommend you to edit your my.cnf configuration file and increase the innodb_buffer_pool_size value. This way MySQL will be able to allocate sufficiant memory when updating cracked hashes.\n","has_starred","hub_user","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":22,"_84":11,"_85":11},"read","write","admin","user","storage_size",4529023727,"orgData","recentTags",[92],{"_93":45,"_94":95,"_96":97,"_98":99,"_100":101,"_51":119,"_120":95,"_121":34,"_122":57,"_58":123,"_124":125,"_126":110,"_127":119,"_128":67,"_129":22},"content_type","creator",10319743,"full_size",1854785747,"id",105506424,"images",[102],{"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":97,"_64":67,"_118":-5},"architecture","amd64","digest","sha256:a9492997eef60e6e425e5016c238870ff84c1926e6c5785f14f1af79fbe0367e","features","","last_pulled","2026-10-19T15:03:55.226311557Z","last_pushed","2020-10-05T15:01:34Z","os","linux","os_features","os_version","size","variant","2020-10-05T15:01:33.472471Z","last_updater","last_updater_username","media_type","latest","repository",9287341,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_39":144,"_151":152,"_138":161,"_162":11},{"_41":145,"_43":146,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":147,"_58":36,"_33":34,"_59":60,"_61":45,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":63,"_70":71,"_72":11,"_73":34,"_74":148,"_80":11,"_81":150,"_86":34,"_87":88},[],[45],[57],{"_76":11,"_77":149},[79],{"_83":22,"_84":11,"_85":11},"tags",{"_153":65,"_154":-5,"_155":-5,"_156":157},"count","next","previous","results",[158],{"_93":45,"_94":95,"_96":97,"_98":99,"_100":159,"_51":119,"_120":95,"_121":34,"_122":57,"_58":123,"_124":125,"_126":110,"_127":119,"_128":67,"_129":22},[160],{"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":97,"_64":67,"_118":-5},[],"canDeleteTags","actionData","errors"]

hegusung/hashcatnode

Tags for hegusung/hashcatnode